NI
Product
NGINX Instance Manager
19
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 11Low 0
Watch
Add NGINX Instance Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60005 | 8.2 | Jul 15 | NGINX ngx_http_slice_module vulnerability Affected: 2.17.0 before 2.22.2 |
| CVE-2026-42055 | 8.1 | Jun 17 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Affected: 2.17.0 through 2.22.0 |
| CVE-2026-42530 | 8.1 | Jun 17 | NGINX Open-Source ngx_http_v3_module vulnerability Affected: 2.17.0 through 2.22.0 |
| CVE-2026-9256 | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability Affected: 2.17.0 before 2.22.1 |
| CVE-2026-42945 | 8.1 | May 13 | NGINX ngx_http_rewrite_module vulnerability Affected: 2.16.0 through 2.21.1 |
| CVE-2023-28656 | 8.1 | May 3 | NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have… Affected: 2.0.0 before 2.9.0 |
| CVE-2026-42946 | 7.4 | May 13 | NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability Affected: 2.16.0 through 2.22.0 |
| CVE-2023-28724 | 7.1 | May 3 | NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API… Affected: 2.0.0 before 2.9.0 |
| CVE-2026-40460 | 6.5 | May 13 | NGINX ngx_quic_module vulnerability Affected: 2.16.0 through 2.22.0 |
| CVE-2022-35241 | 6.5 | Aug 4 | NGINX Instance Manager vulnerability CVE-2022-35241 Affected: 2.x before 2.3.1; 1.0.0 before 1.x* |
| CVE-2026-60062 | 6.4 | Jul 15 | NGINX Agent Vulnerability Affected: 2.22.0 before 2.22.2; 2.17.1 |
| CVE-2026-1642 | 5.9 | Feb 4 | A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers Affected: 2.15.1 through 2.21.0 |
| CVE-2026-42926 | 5.8 | May 13 | NGINX ngx_http_proxy_v2_module vulnerability Affected: 2.16.0 through 2.22.0 |
| CVE-2023-1550 | 5.5 | Mar 29 | Insertion of Sensitive Information into log file vulnerability in NGINX Agent Affected: 2.0.0 before 2.9.0 |
| CVE-2024-10318 | 5.4 | Nov 6 | A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time Affected: 2.5.0 before 2.17.4 |
| CVE-2024-7634 | 4.9 | Aug 22 | NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory Affected: 2.3.1 before 2.17.2 |
| CVE-2026-48142 | 4.8 | Jun 17 | NGINX ngx_http_charset_module vulnerability Affected: 2.17.0 through 2.22.0 |
| CVE-2026-42934 | 4.8 | May 13 | NGINX ngx_http_charset_module vulnerability Affected: 2.16.0 through 2.22.0 |
| CVE-2026-40701 | 4.8 | May 13 | NGINX ngx_http_ssl_module vulnerability Affected: 2.16.0 through 2.22.0 |
Showing 19